FortiGate integration (integrated mode with FOS 5.6 and higher)

You can send files to FortiNDR using FortiGate 5.6 and higher.

FortiGate cannot receive files from both FortiSandbox and FortiNDR simultaneously.If your FortiGate has FortiSandbox configured, consider using another mode.

FortiNDR uses the same OFTP (Optimized Fabric Transfer Protocol) over SSL (encrypted) from FortiGate to FortiSandbox. If you are not using FortiSandbox, you can use FortiGate's Sandbox Inspection to send files to FortiNDR.

For information on configuring FortiGate, see the FortiGate documentation in the Fortinet Document Library.

To send files from FortiGate to FortiNDR:

1. Set up the IP address on FortiGate.

   

2. Configure an AV profile to send files to FortiNDR.

   

3. Apply AV profile in the firewall policy.

   

4. Authorize the FortiGate on FortiNDR for sending files.

   

5. Check the FortiNDR processed traffic. See FortiGate integration (integrated mode with FOS 5.6 and higher).